Open
Cached
·
just now
12
directives
Content-Security-Policy
No enforced CSP headers found.
Content-Security-Policy-Report-Only
Content-Security-Policy-Report-Only: child-src 'self' https * blob:; connect-src 'self' https *; default-src 'self' https; font-src 'self' https * data: moz-extension:; frame-src 'self' https *; img-src 'self' https * blob: data: android-webview-video-poster:; media-src 'self' https * data:; object-src 'self' https *; script-src 'self' https * data: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https * blob: data: 'unsafe-inline'; worker-src 'self' https * blob:; report-uri https://sentry.io/api/6314511/security/?sentry_key=04126561748147289224fdbccbbe147d@o1192770.ingest.sentry.io/6314511
child-src
Keyword
—
'self'
child-src
Host
—
child-src
Host
—
*
child-src
Scheme
—
blob:
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
*
default-src
Keyword
—
'self'
default-src
Host
—
font-src
Keyword
—
'self'
font-src
Host
—
font-src
Host
—
*
font-src
Scheme
—
data:
font-src
Scheme
—
moz-extension:
frame-src
Keyword
—
'self'
frame-src
Host
—
frame-src
Host
—
*
img-src
Keyword
—
'self'
img-src
Host
—
img-src
Host
—
*
img-src
Scheme
—
blob:
img-src
Scheme
—
data:
img-src
Scheme
—
android-webview-video-poster:
media-src
Keyword
—
'self'
media-src
Host
—
media-src
Host
—
*
media-src
Scheme
—
data:
object-src
Keyword
—
'self'
object-src
Host
—
object-src
Host
—
*
script-src
Keyword
—
'self'
script-src
Host
—
script-src
Host
—
*
script-src
Scheme
—
data:
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
style-src
Keyword
—
'self'
style-src
Host
—
style-src
Host
—
*
style-src
Scheme
—
blob:
style-src
Scheme
—
data:
style-src
Keyword
—
'unsafe-inline'
worker-src
Keyword
—
'self'
worker-src
Host
—
worker-src
Host
—
*
worker-src
Scheme
—
blob:
